HTTPS uses SSL to encrypt communication between a user's computer and a server to protect against man-in-the-middle attacks. However, websites may only use password authentication over HTTPS, leaving emails and other traffic unencrypted. To improve security, users should force encryption by changing URLs to HTTPS, use dedicated email and messaging clients instead of web browsers, and opt for client applications when possible to encrypt more of their online activities. Nothing provides 100% security but these steps can make a user 80-90% safe.